Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/3138392e33382e38302e302f32302d3234203d3e203238323939.roa
File:                     3138392e33382e38302e302f32302d3234203d3e203238323939.roa (raw, json)
Hash identifier:          9u+7B5EMctwSR/8HkqG4vOKZTwThtzD2dPZHOAG/44k=
Subject key identifier:   63:9C:02:19:D2:F2:FD:2C:C2:58:5D:C1:9C:10:DA:9E:2F:BF:0C:10
Certificate issuer:       /CN=2980DBB4CE53A385512CBB87747D8CA1ADD09AEC
Certificate serial:       7FFA442B0787C226649A736055DAE6699A2218E7
Authority key identifier: 29:80:DB:B4:CE:53:A3:85:51:2C:BB:87:74:7D:8C:A1:AD:D0:9A:EC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/3138392e33382e38302e302f32302d3234203d3e203238323939.roa
Signing time:             Mon 28 Oct 2024 18:36:08 +0000
ROA not before:           Mon 28 Oct 2024 18:31:08 +0000
ROA not after:            Mon 27 Oct 2025 18:36:08 +0000
asID:                     28299
IP address blocks:        189.38.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.crl
                          rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 22 Nov 2024 20:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:fa:44:2b:07:87:c2:26:64:9a:73:60:55:da:e6:69:9a:22:18:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2980DBB4CE53A385512CBB87747D8CA1ADD09AEC
        Validity
            Not Before: Oct 28 18:31:08 2024 GMT
            Not After : Oct 27 18:36:08 2025 GMT
        Subject: CN=639C0219D2F2FD2CC2585DC19C10DA9E2FBF0C10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:36:20:11:e4:a5:0f:09:f6:d4:e1:9d:ea:96:
                    8a:1b:7f:dc:5f:92:df:b5:b0:41:7c:1c:7f:fc:c4:
                    29:37:6f:cb:46:e2:88:3d:b2:b7:0d:7d:b2:5e:85:
                    c9:6c:d5:98:7f:0d:1d:57:30:08:9a:4c:40:11:7e:
                    19:f2:36:5a:dd:60:4e:41:8f:56:47:76:5e:75:86:
                    38:6a:7a:37:1d:5f:6e:1c:80:aa:00:97:f4:db:11:
                    d7:75:aa:e9:d8:91:77:87:d9:b5:75:88:28:f0:9b:
                    bc:0a:17:46:9c:d8:d6:d9:af:b7:5e:b5:ca:80:8f:
                    20:94:12:a2:96:6c:09:fb:19:da:7e:b0:8f:1f:50:
                    f8:a4:1b:53:98:d3:78:4c:19:2b:41:4f:af:af:c0:
                    3b:78:b8:56:a1:08:83:13:58:0b:6b:74:5b:b4:0d:
                    21:9e:2f:ee:cd:1f:d4:bd:52:23:d0:c3:a1:ec:2a:
                    40:a6:69:17:ef:cd:fc:58:95:28:87:ac:c6:1e:50:
                    e4:20:28:d0:9b:ea:94:7c:b7:d6:a8:80:14:af:05:
                    99:4d:b1:43:7a:c7:f6:c8:75:bc:c8:77:dc:85:cd:
                    66:72:e9:6b:1c:10:20:6d:25:9e:11:26:59:f0:00:
                    f5:c6:cb:99:81:ee:8b:ca:2e:23:5b:c4:34:c5:c6:
                    a6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:9C:02:19:D2:F2:FD:2C:C2:58:5D:C1:9C:10:DA:9E:2F:BF:0C:10
            X509v3 Authority Key Identifier:
                keyid:29:80:DB:B4:CE:53:A3:85:51:2C:BB:87:74:7D:8C:A1:AD:D0:9A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2980DBB4CE53A385512CBB87747D8CA1ADD09AEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bet8xzAQ4hkvVnFq3W6i1WwbCtQxwNzoc882rS3GL59H/0/3138392e33382e38302e302f32302d3234203d3e203238323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.38.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         39:5d:4c:b5:c0:73:4e:13:c8:87:52:cc:2b:4a:ee:d8:99:d5:
         17:5d:d1:0b:b1:1a:d5:7a:6d:9a:08:e9:e7:30:aa:05:86:a7:
         b5:63:67:9b:e8:37:55:5c:a1:61:78:15:68:7c:ce:0c:d4:e2:
         76:5c:a2:46:e7:a5:e7:52:6e:e6:28:8c:2e:b0:80:e4:63:ae:
         72:87:36:a1:ba:7c:1a:3c:1a:02:f4:02:d2:71:39:22:96:99:
         45:0b:be:43:fc:cd:d6:76:1f:55:7f:aa:a5:e8:ec:df:e3:8d:
         c2:2a:dd:58:8f:7c:0d:07:e0:45:00:59:5c:48:d8:71:d5:4e:
         a7:f3:c8:d3:2f:39:02:73:08:3b:f9:6a:02:62:f9:92:35:e7:
         a7:96:ee:f7:a0:e0:cf:ff:f1:4a:28:04:4e:1d:28:50:86:eb:
         9a:3c:5b:c7:9c:07:2b:db:57:e2:3e:6a:4e:3f:fd:cf:26:a2:
         35:6d:40:41:ad:ca:ed:ec:a9:c6:16:75:ed:2e:f0:c5:92:57:
         3d:b4:46:47:05:73:97:5b:ee:2f:09:2f:8f:ee:6b:f5:ca:32:
         d6:cc:53:28:4c:a2:1b:a8:a7:a9:b7:21:32:48:81:b8:9a:2f:
         cd:d4:38:7e:fa:41:67:85:f6:b8:72:9d:0a:f7:ec:e5:28:fc:
         1d:8b:2a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:54 2024 by rpki-client on console-fra.rpki-client.org